Analysis
-
max time kernel
142s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
29-08-2023 17:59
General
-
Target
d64288301aad86873d614e5afbb74550_mafia_JC.exe
-
Size
247KB
-
MD5
d64288301aad86873d614e5afbb74550
-
SHA1
3bc96f0775ae8ffcfe71a6eb82ce998bd9f1743a
-
SHA256
1c207878a2a8c526188daa10df75de78e8aa51cf74d21e4b77b7e59f0bb6ddc9
-
SHA512
c64086adee3aa2b9352da9574a1d8773f3b866d78d41822dbeab5f0e16961010a74c301cf3c30d68542d46d6e5243a2cdac64feded0750c1d3f90b549d3f2676
-
SSDEEP
3072:Ne/3l1glxNGX0+tl0BNsPmmWpOTgfgDOOK+74ArCjZ/NHkciAHaLiq7:NevEDGk+tOWmTYD/gEY/EcHKiw
Score
10/10
Malware Config
Signatures
-
GandCrab payload 2 IoCs
-
Gandcrab
Gandcrab is a Trojan horse that encrypts files on a computer.
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d64288301aad86873d614e5afbb74550_mafia_JC.exe"C:\Users\Admin\AppData\Local\Temp\d64288301aad86873d614e5afbb74550_mafia_JC.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2532 -s 4802⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 2532 -ip 25321⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
268KB
-
Filesize
268KB
-
Filesize
92KB
-
Filesize
108KB